Patchwire CVEs, their patch status, and feeds to follow them

CVE-2008-2086

Fixed in a distro release EPSS 7%

Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.

Published 2008-12-05 · CVE record · OSV

Products: sun jdk, sun jre, sun sdk

Distro releases

ReleasePackageFixed in
Chainguardopenjdk-11-openj90.59.0-r2
Chainguardopenjdk-11-openj9-dbg0.59.0-r2
Chainguardopenjdk-11-openj9-default-jdk0.59.0-r2
Chainguardopenjdk-11-openj9-default-jvm0.59.0-r2
Chainguardopenjdk-11-openj9-doc0.59.0-r2
Chainguardopenjdk-11-openj9-jmods0.59.0-r2
Chainguardopenjdk-11-openj9-jre0.59.0-r2
Chainguardopenjdk-17-openj90.59.0-r1
Chainguardopenjdk-17-openj9-dbg0.59.0-r1
Chainguardopenjdk-17-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-17-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-17-openj9-doc0.59.0-r1
Chainguardopenjdk-17-openj9-jmods0.59.0-r1
Chainguardopenjdk-17-openj9-jre0.59.0-r1
Chainguardopenjdk-21-openj90.59.0-r1
Chainguardopenjdk-21-openj9-dbg0.59.0-r1
Chainguardopenjdk-21-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-21-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-21-openj9-doc0.59.0-r1
Chainguardopenjdk-21-openj9-jmods0.59.0-r1
Chainguardopenjdk-21-openj9-jre0.59.0-r1
Chainguardopenjdk-25-openj90.59.0-r1
Chainguardopenjdk-25-openj9-dbg0.59.0-r1
Chainguardopenjdk-25-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-25-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-25-openj9-jmods0.59.0-r1
Chainguardopenjdk-25-openj9-jre0.59.0-r1
Chainguardopenjdk-26-openj90.59.0-r1
Chainguardopenjdk-26-openj9-dbg0.59.0-r1
Chainguardopenjdk-26-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-26-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-26-openj9-jmods0.59.0-r1
Chainguardopenjdk-26-openj9-jre0.59.0-r1
Chainguardopenjdk-8-openj90.59.0-r1
Chainguardopenjdk-8-openj9-dbg0.59.0-r1
Chainguardopenjdk-8-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-8-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-8-openj9-doc0.59.0-r1
Chainguardopenjdk-8-openj9-jre0.59.0-r1
Red Hat network satellite 5.1java-1.5.0-sun0:1.5.0.22-1jpp.1.el4
Red Hat network satellite 5.1java-1.5.0-sun-devel0:1.5.0.22-1jpp.1.el4
Red Hat rhel extras 3java-1.4.2-ibm0:1.4.2.13-1jpp.1.el3
Red Hat rhel extras 3java-1.4.2-ibm-demo0:1.4.2.13-1jpp.1.el3
Red Hat rhel extras 3java-1.4.2-ibm-devel0:1.4.2.13-1jpp.1.el3
Red Hat rhel extras 3java-1.4.2-ibm-jdbc0:1.4.2.13-1jpp.1.el3
Red Hat rhel extras 3java-1.4.2-ibm-plugin0:1.4.2.13-1jpp.1.el3
Red Hat rhel extras 3java-1.4.2-ibm-src0:1.4.2.13-1jpp.1.el3
Red Hat rhel extras 4java-1.4.2-ibm0:1.4.2.13-1jpp.1.el4
Red Hat rhel extras 4java-1.4.2-ibm-demo0:1.4.2.13-1jpp.1.el4
Red Hat rhel extras 4java-1.4.2-ibm-devel0:1.4.2.13-1jpp.1.el4
Red Hat rhel extras 4java-1.4.2-ibm-javacomm0:1.4.2.13-1jpp.1.el4
Red Hat rhel extras 4java-1.4.2-ibm-jdbc0:1.4.2.13-1jpp.1.el4
Red Hat rhel extras 4java-1.4.2-ibm-plugin0:1.4.2.13-1jpp.1.el4
Red Hat rhel extras 4java-1.4.2-ibm-src0:1.4.2.13-1jpp.1.el4
Red Hat rhel extras 4java-1.5.0-ibm1:1.5.0.9-1jpp.4.el4
Red Hat rhel extras 4java-1.5.0-ibm-demo1:1.5.0.9-1jpp.4.el4
Red Hat rhel extras 4java-1.5.0-ibm-devel1:1.5.0.9-1jpp.4.el4
Red Hat rhel extras 4java-1.5.0-ibm-javacomm1:1.5.0.9-1jpp.4.el4
Red Hat rhel extras 4java-1.5.0-ibm-jdbc1:1.5.0.9-1jpp.4.el4
Red Hat rhel extras 4java-1.5.0-ibm-plugin1:1.5.0.9-1jpp.4.el4
Red Hat rhel extras 4java-1.5.0-ibm-src1:1.5.0.9-1jpp.4.el4
Red Hat rhel extras 4java-1.5.0-sun0:1.5.0.17-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-sun-demo0:1.5.0.17-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-sun-devel0:1.5.0.17-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-sun-jdbc0:1.5.0.17-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-sun-plugin0:1.5.0.17-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-sun-src0:1.5.0.17-1jpp.2.el4
Red Hat rhel extras 4java-1.6.0-ibm1:1.6.0.3-1jpp.3.el4
Red Hat rhel extras 4java-1.6.0-ibm-demo1:1.6.0.3-1jpp.3.el4
Red Hat rhel extras 4java-1.6.0-ibm-devel1:1.6.0.3-1jpp.3.el4
Red Hat rhel extras 4java-1.6.0-ibm-javacomm1:1.6.0.3-1jpp.3.el4
Red Hat rhel extras 4java-1.6.0-ibm-jdbc1:1.6.0.3-1jpp.3.el4
Red Hat rhel extras 4java-1.6.0-ibm-plugin1:1.6.0.3-1jpp.3.el4
Red Hat rhel extras 4java-1.6.0-ibm-src1:1.6.0.3-1jpp.3.el4
Red Hat rhel extras 4java-1.6.0-sun1:1.6.0.11-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-demo1:1.6.0.11-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-devel1:1.6.0.11-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-jdbc1:1.6.0.11-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-plugin1:1.6.0.11-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-src1:1.6.0.11-1jpp.1.el4
Red Hat rhel extras 5java-1.4.2-ibm0:1.4.2.13-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-ibm-demo0:1.4.2.13-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-ibm-devel0:1.4.2.13-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-ibm-javacomm0:1.4.2.13-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-ibm-jdbc0:1.4.2.13-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-ibm-plugin0:1.4.2.13-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-ibm-src0:1.4.2.13-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-ibm1:1.5.0.9-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-ibm-accessibility1:1.5.0.9-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-ibm-demo1:1.5.0.9-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-ibm-devel1:1.5.0.9-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-ibm-javacomm1:1.5.0.9-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-ibm-jdbc1:1.5.0.9-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-ibm-plugin1:1.5.0.9-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-ibm-src1:1.5.0.9-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-sun0:1.5.0.17-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-sun-demo0:1.5.0.17-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-sun-devel0:1.5.0.17-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-sun-jdbc0:1.5.0.17-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-sun-plugin0:1.5.0.17-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-sun-src0:1.5.0.17-1jpp.2.el5
Red Hat rhel extras 5java-1.6.0-ibm1:1.6.0.3-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-accessibility1:1.6.0.3-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-demo1:1.6.0.3-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-devel1:1.6.0.3-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-javacomm1:1.6.0.3-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-jdbc1:1.6.0.3-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-plugin1:1.6.0.3-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-src1:1.6.0.3-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun1:1.6.0.11-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-demo1:1.6.0.11-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-devel1:1.6.0.11-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-jdbc1:1.6.0.11-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-plugin1:1.6.0.11-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-src1:1.6.0.11-1jpp.1.el5